Infrastructure Security Engineer

We are seeking an experienced Infrastructure Security Engineer to join our security team within our technology organization. The focus will be on our corporate IT infrastructure and our security processes and procedures (vulnerability scanning, intrusion prevention, disaster recovery).  The successful candidate will establish advanced security capabilities within the organization and drive improvements in our security posture in support of our client’s mission.

Why join this team:
We are growing our security team looking for someone who wants to make a difference and have an impact on our path and direction.  While the focus will be corporate IT infrastructure, you will also have the opportunity to work on security of our SaaS application and AWS infrastructure.
  
The impact you’ll have:

• You’ll develop, monitor, and assess our data, server, and network security implementations.
• You’ll conduct vulnerability testing and implement remediation.
• You’ll review and refine data security policies and procedures.
• You’ll conduct security audits in our use of third-party tools (Jira, Confluence, Github, Jenkins, etc.).
• You’ll implement and monitor security awareness assessments and training.
• You’ll prepare us for third party audits (SOC, PCI DSS).

 
Who we’re looking for:

• 3+ years of hands-on security experience in consumer website environment and/or academic environment (post-graduate experience only, please).
• Experience with corporate security tools such as SIEMs, endpoint protection, DLP, vulnerability scanning, etc.
• Ability to work in and enjoy a fast-paced environment across organizational teams.
• Must be comfortable and have ability to multi-task.
• Excellent verbal and written communication skills.
• General analysis/problem solving and ability to develop creative solutions.
• Bachelor’s degree in software, networks, communications or engineering, and a master’s degree in cyber security, is preferred.

 
We’d also love to see, though not required:

• Experience with Amazon Web Services, especially network/data security features – security groups, VPCs, WAF, etc.
• Some audit and compliance (ISO-27000, NIST-800, SOC, PCI) efforts and understanding.